CVE-2021-24597

CVE-2021-24597: You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting

Vendor Unknown
Product 有赏 You Shang
Weakness CWE-79 · XSS
Published September 20, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used

Key dates

02Disclosure timeline

September 20, 2021 CVE published
August 3, 2024 Record updated